Skip to content

GitLab

lemonldap-ng
lemonldap-ng
Open
Opened by Mehdi KHELIFA@mek
Report abuse New issue

[SAML] Lasso Error Code -201

Concerned version

Version: %2.0.7

Platform: (Apache)

Summary

Some SAML Service providers are not working. I suppose it's related to some consistency issue with the Service Provider Metadatas. But LL:NG should have shown an error when I register the SP. Even with the IdpInitiated option enable, I'm still facing the same error page (An error occured during SAML single sign on) with SAMLRequest in the URL

Logs

[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Start routing saml
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing _forAuthUser
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Cleaning pdata
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing importHandlerData
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing controlUrl
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing code ref
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Launching ::Password::AD::_modifyPassword
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing code ref
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] URL /saml/singleSignOn?SAMLRequest=fZBPS8QwEEe/Ssm96R8r4rAtVHspWJXdxQUvEmpoA2kSMxOrfnrb7mW9eJ/3fo/ZoZi0gzrQaPbyI0ik6EV6VNaULOcpi9qmZMfPxrann/eQdvqtywj3eNJ38eQoXg4Qg2wNkjC0MGmexmkWZ1fH7AaKHIpbXmTXryxqFrcygjb1SOQQkkQswxzRcvLCKc17OyVrUoLKDFoe1GCeDIu+Jm0QttaSBW/AClQIRkwSgXo41N0DLLngvCXbW82q3XoNW5y/4P/HBaL0ayGr5nnmTgcvNKphpLVsl1w4zwMOHhdJ2zxbrfrvqNbazvdeCpIlIx8kS6oz9ffH1S8=&RelayState=Mm8KXJVTHxsXILwo5249LfEIUilR3K&SigAlg=http://www.w3.org/2001/04/xmldsig-more#rsa-sha256&Signature=jSikuUYKncp76e03j8BS+DFYcvwxzg0ZRvjYy/IDJCMQWP8Rm49bfJ6lZIAjCL4Kih2xGVKuDxrksodYdlDLTN4cFEdu8vXH/EX8LE2z4dFhgqBgaxRVo6Nu4Ac4GAGUbx++X72joTDoLfO5OOfg9bfU6sW6EnmwMNHp3DKU1v1ebi8vq+eMHZLW9Fwrg2IWyeJSLMqVtO0J/uKKzDorTcQlDSkKfCD5/NxNsPGQeR/FUb1nAczzKgVZpYpqrOS5/gn78vQUjlseVIvnJ5+rDcpP1PymI8S33Lv4LtsRdI/FnoFnZbrcQJbqL9OmYvWr26dsDEbydw7EogKajpvc8Q== detected as an SSO request URL
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] SAML method: HTTP-REDIRECT
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] HTTP-REDIRECT: SAML Request SAMLRequest=fZBPS8QwEEe%2FSsm96R8r4rAtVHspWJXdxQUvEmpoA2kSMxOrfnrb7mW9eJ%2F3fo%2FZoZi0gzrQaPbyI0ik6EV6VNaULOcpi9qmZMfPxrann%2FeQdvqtywj3eNJ38eQoXg4Qg2wNkjC0MGmexmkWZ1fH7AaKHIpbXmTXryxqFrcygjb1SOQQkkQswxzRcvLCKc17OyVrUoLKDFoe1GCeDIu%2BJm0QttaSBW%2FAClQIRkwSgXo41N0DLLngvCXbW82q3XoNW5y%2F4P%2FHBaL0ayGr5nnmTgcvNKphpLVsl1w4zwMOHhdJ2zxbrfrvqNbazvdeCpIlIx8kS6oz9ffH1S8%3D&RelayState=Mm8KXJVTHxsXILwo5249LfEIUilR3K&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=jSikuUYKncp76e03j8BS%2BDFYcvwxzg0ZRvjYy%2FIDJCMQWP8Rm49bfJ6lZIAjCL4Kih2xGVKuDxrksodYdlDLTN4cFEdu8vXH%2FEX8LE2z4dFhgqBgaxRVo6Nu4Ac4GAGUbx%2B%2BX72joTDoLfO5OOfg9bfU6sW6EnmwMNHp3DKU1v1ebi8vq%2BeMHZLW9Fwrg2IWyeJSLMqVtO0J%2FuKKzDorTcQlDSkKfCD5%2FNxNsPGQeR%2FFUb1nAczzKgVZpYpqrOS5%2Fgn78vQUjlseVIvnJ5%2BrDcpP1PymI8S33Lv4LtsRdI%2FFnoFnZbrcQJbqL9OmYvWr26dsDEbydw7EogKajpvc8Q%3D%3D
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Lasso Identity loaded
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Lasso error code -201: The identifier of a provider is unknown to #LassoServer. To register a provider in a #LassoServer object, you must use the methods lasso_server_add_provider() or lasso_server_add_provider_from_buffer().
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [error] SSO: Fail to process authentication request
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Returned error: 51 (PE_SAML_SSO_ERROR)
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Skin returned: error
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Calling sendHtml with template error

Backends used

Debian 9 / Apache 2.4 / PostgreSQL 9 for Configuration and Session Storage

Possible fixes